STACKIT pfSense Deployment

Terraform script to deploy an pfSense firewall into STACKIT Cloud.

Deployment overview:

The Terraform deployment consists of:

• WAN Network
• LAN Network
• pfSense firewall VM + disk volume
• FloatingIP for firewall VM
• deactivating port security on firewall ports

Setup

Requirements:

• Terraform installed
• Access to a STACKIT project
• STACKIT Service Account Key

Installation

1. Clone Repo
2. Set Project ID in 01-config.tf
3. Create & Save a STACKIT Service Account Token and place it in the secrets.json file.
4. Run Terraform terraform apply

Default Configuration

Interfaces

1. vtnet0 WAN
2. vtnet1 LAN

NAT

Masqurade (Outbound NAT) Traffic from LAN to WAN

Dashboard

Customized Widgets and CSS settings

Password

Set default password for admin to STACKIT123!

Interface Access

Disabled Referer-Check Enable allow all wan adresses to connect to the WebUI

Now you can enter the WebUI via the FloatingIP on port 443 the default login is admin:STACKIT123!